Privacy Training Content Outline

The Privacy Training provided to the workforce may include the following:

I. What is HIPAA?

  • Background and History
  • Compliance Date 

II. What is Protected Health Information ("PHI")?

  • Any information about a participant's past, present, or future physical or mental health condition or payment for care that identifies or could be used to identify the patient.

III. What the Privacy Rule Will Mean for Health Plans

  • Required to comply - not voluntary
  • Notice of Privacy Practices ("Notice")
  • Privacy Official
  • Use and Disclosure of PHI
  • Authorization Forms
  • Business Associates
  • Disclosure to Missouri State University
  • Participant Rights
  • Privacy Policies and Procedures
  • Minimum necessary uses, disclosures of and requests for PHI
  • Responsibility to protect participant's PHI
  • Complaint Procedure
  • Sanctions for Violations
  • Refraining from Retaliatory or Intimidating Acts

IV. What the Privacy Rule Will Mean for Participants

  • Increased knowledge about the uses and disclosures of their PHI
  • Specific rights regarding their PHI including:
    • The right to a paper copy of the organization's Notice
    • The right to request restrictions on the uses and disclosures of their PHI
    • The right to receive confidential communication
    • The right of access to their PHI
    • The right to request amendment of inaccurate or incomplete PHI
    • The right to request an accounting of disclosures of PHI